This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft File: 7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft (raw, json) Hash identifier: abS+sRrw9W28h9Q6xHDv/FdwX7sCGdoBKrKVvulKajc= Subject key identifier: E3:69:CF:8D:A8:58:09:91:B9:FD:05:2F:3F:67:F4:1F:93:C3:E0:73 Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9 Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9 Certificate serial: 019B3AC6D8BCE6BBFE6EB12B58011B9341C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft Manifest number: 152A Signing time: Sat 20 Dec 2025 08:01:08 +0000 Manifest this update: Sat 20 Dec 2025 08:01:08 +0000 Manifest next update: Sun 21 Dec 2025 08:01:08 +0000 Files and hashes: 1: 7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl (hash: LArX5Ip6l/6pYCpjHym9dH+c++yoak+OyWiQAznekQw=) 2: 87P_Ci_iU70ncygI7CnpcT0_t3U.roa (hash: Dx/6MtnsELNcfT3Kd/IAvBHzZJiX4ArB2AnOrW867fY=) 3: BVScilCB5AVz4BdoAZN-XzcZq3M.roa (hash: Oi7kCEaMjqNz1/ABo7GXrFFSRxf0di49byHZnkWl/xY=) 4: RTkmkNiaF4qMZtlUnnCXs8j2Uz4.roa (hash: vl+4xCPXpGUni/jcI0T4WydcImVmhjMnOzOiGTD/SYU=) 5: peAC0jemS44LL9eAMtnnvfhl0QQ.roa (hash: M7HBy7+sXugALnAMwzpYlFnUldtIuCHef9Q+Yk5qLvo=) 6: tB98Odb5xySPuatQxtBYr1TkuKY.roa (hash: jqy1Pxj3jnhl57ZRWHAF9knEyjWAZ+BFSBls3RcvCpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:d8:bc:e6:bb:fe:6e:b1:2b:58:01:1b:93:41:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9 Validity Not Before: Dec 20 08:01:08 2025 GMT Not After : Dec 21 08:01:08 2025 GMT Subject: CN=e369cf8da8580991b9fd052f3f67f41f93c3e073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7a:32:52:5b:e9:57:5d:3a:10:d3:e1:6e:60: ea:51:60:97:3d:2e:50:e3:5c:c6:c5:23:2e:e9:51: a5:a0:77:64:c0:08:eb:47:e6:67:88:57:ed:b7:df: 00:4f:a9:66:e3:8e:8a:4e:46:9b:c5:0a:59:31:e9: ba:97:b1:20:44:7a:34:11:2a:70:58:a6:08:74:cf: a6:02:86:43:1d:4f:f4:0b:fd:c5:14:e1:f8:f6:06: 5a:c5:3a:d2:1d:74:e3:e6:7d:d4:ce:1a:67:ea:44: f1:1a:d3:fa:b5:f2:2b:07:4c:d7:9a:32:d4:d7:62: 94:c3:e0:3b:c2:f6:24:45:d7:fa:78:10:21:d5:e1: d2:e9:88:ca:87:77:fa:bc:97:ce:46:f9:3d:87:3c: 6c:ad:83:88:31:d2:f2:2f:50:2e:a6:81:27:75:cc: fc:b5:d0:88:f4:ae:fa:3b:93:4c:08:4b:fe:dc:7c: 22:e5:96:2c:b7:69:71:5b:7e:a2:f5:0f:ef:3a:56: b3:47:e9:cd:0a:40:f4:51:da:79:0b:1a:31:e7:7a: d8:b4:84:10:46:93:56:48:14:36:64:21:f1:d1:af: bc:ef:77:3b:13:a8:48:17:e1:7d:93:c3:ee:fc:d3: 5d:c3:ff:da:18:90:5f:3a:51:0e:36:e1:a5:00:8d: d4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:69:CF:8D:A8:58:09:91:B9:FD:05:2F:3F:67:F4:1F:93:C3:E0:73 X509v3 Authority Key Identifier: keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c4:fa:90:1a:b0:5e:82:54:4a:1f:24:fb:ce:3f:aa:7d:58: ab:b4:63:18:c3:1c:8e:4f:61:b2:22:c3:4b:f9:37:ad:f3:3f: 28:7c:2e:d1:b1:45:b9:00:15:25:ce:a2:8f:06:4f:16:ca:7f: ae:d4:70:71:0b:9f:f4:b7:69:e2:a7:62:90:b2:62:52:bd:de: dd:c8:85:f3:61:7a:5e:2b:45:e0:10:91:c9:54:67:44:70:db: 17:aa:36:37:a1:88:2b:f9:ec:6f:21:d0:d1:30:06:87:3e:7e: a4:ef:0e:0b:e0:11:16:7d:96:75:51:8b:ff:10:23:cb:2f:dd: 99:cb:3d:64:ca:06:a8:a1:a5:f2:ee:af:46:eb:d3:4c:72:89: 00:95:b6:04:aa:e7:f1:69:9a:be:23:86:63:f0:67:90:a2:57: 15:aa:5e:61:7c:6f:0f:2d:d0:d0:38:b9:63:78:38:d8:1f:6d: 66:e3:86:75:11:b0:ba:0d:a2:3c:42:74:09:07:f7:88:ff:a2: 06:57:37:25:ea:a1:05:ce:ea:7c:ad:aa:e0:c4:cc:7f:21:d9: 7b:fd:fa:e2:d7:d1:1d:e4:d3:6b:4e:66:6b:39:8c:4a:8d:7a: 87:a5:4e:fe:76:06:a2:90:b6:85:fc:c8:62:02:9e:14:9a:e6: cf:a5:c5:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xti85rv+brErWAEbk0HBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYmE3NzRiYTgyZmIwNDI3Zjc2NmU3ODNlNzcwZjRiZDk2 NDE2ZjkwHhcNMjUxMjIwMDgwMTA4WhcNMjUxMjIxMDgwMTA4WjAzMTEwLwYDVQQD EyhlMzY5Y2Y4ZGE4NTgwOTkxYjlmZDA1MmYzZjY3ZjQxZjkzYzNlMDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnoyUlvpV106ENPhbmDqUWCXPS5Q 41zGxSMu6VGloHdkwAjrR+ZniFftt98AT6lm446KTkabxQpZMem6l7EgRHo0ESpw WKYIdM+mAoZDHU/0C/3FFOH49gZaxTrSHXTj5n3Uzhpn6kTxGtP6tfIrB0zXmjLU 12KUw+A7wvYkRdf6eBAh1eHS6YjKh3f6vJfORvk9hzxsrYOIMdLyL1AupoEndcz8 tdCI9K76O5NMCEv+3Hwi5ZYst2lxW36i9Q/vOlazR+nNCkD0Udp5Cxox53rYtIQQ RpNWSBQ2ZCHx0a+873c7E6hIF+F9k8Pu/NNdw//aGJBfOlEONuGlAI3UEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONpz42oWAmRuf0FLz9n9B+Tw+BzMB8GA1UdIwQY MBaAFOy6d0uoL7BCf3ZueD53D0vZZBb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUt MzkyYjg2M2M5ZjAzLzEvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUtMzkyYjg2M2M5ZjAz LzEvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMT6kBqw XoJUSh8k+84/qn1Yq7RjGMMcjk9hsiLDS/k3rfM/KHwu0bFFuQAVJc6ijwZPFsp/ rtRwcQuf9Ldp4qdikLJiUr3e3ciF82F6XitF4BCRyVRnRHDbF6o2N6GIK/nsbyHQ 0TAGhz5+pO8OC+ARFn2WdVGL/xAjyy/dmcs9ZMoGqKGl8u6vRuvTTHKJAJW2BKrn 8WmaviOGY/BnkKJXFapeYXxvDy3Q0Di5Y3g42B9tZuOGdRGwug2iPEJ0CQf3iP+i Blc3JeqhBc7qfK2q4MTMfyHZe/364tfRHeTTa05mazmMSo16h6VO/nYGopC2hfzI YgKeFJrmz6XF2Q== -----END CERTIFICATE-----Generated at Sat Dec 20 13:59:25 2025 by rpki-client